Frequently asked questions
Do I need an account to use Graspee?
No. You can create a local profile and start using Graspee immediately with no account, no email, and no internet connection. An account is only needed if you want to sync across devices.
Is Graspee free?
Yes. Graspee is free to use, including local profiles and cloud sync.
What kinds of things do people keep in Graspee?
Annual reviews and life-plan notes; warranties, instructions, account numbers, and household reference; recurring practices with retained completion history (workouts, journaling, habits); long-term financial planning alongside the notes that explain it; books read, places visited, family history. The point is the parts of your life you want to look up later, not only this week's tasks.
Will my data still be readable in ten years?
Local profiles are stored on your device in IndexedDB, encrypted with your password. They do not require a Graspee account or an internet connection to read, so they keep working even if Graspee is offline or paused. We will not claim a confirmed export format until one ships.
How does the encryption work?
Your password derives a key (PBKDF2, 200K iterations) that encrypts a randomly generated data key (AES-GCM-256). All your data is encrypted with this key before it leaves the browser. The server only stores encrypted blobs, except for the documented calendar app plaintext exception (Quick Add events staged for your Calendar inbox while pending, and published read-only subscription artifacts).
Are calendar app connections encrypted end-to-end?
No. Calendar app connections are the only documented plaintext exception. External calendar apps must be able to read .ics, so read-only subscription artifacts are plaintext on the server, and Quick Add events from your calendar app are stored in plaintext while pending in your Calendar inbox so the unlocked browser can import them. After import, ignore, expiry, or tombstone the staged plaintext is scrubbed. Pending events expire after 7 days.
How does sync work?
Cloud sync uses Yjs CRDT documents transmitted over WebSocket. All data is encrypted client-side before syncing. The server relays encrypted blobs between your devices and cannot read them. Changes merge automatically when you come back online.
Can I disconnect sync or remove my cloud data later?
Yes. Settings lets you disconnect a profile from sync (the local profile remains usable offline), reconnect later, or permanently delete the synced profile and its server-side blobs. Local-only profiles never leave your device.
Does it work offline?
Yes. Graspee is offline-first. All data is stored locally in IndexedDB and works without any network connection. If you have sync enabled, changes are synchronized when you're back online.
How does the personal finance tracker work?
You can manually create accounts and transactions, connect your bank through supported providers for automatic imports, or import CSV statements with column mapping and undo. Tag, review, filter, and budget. All finance data is encrypted locally like everything else.
Can I import transactions from CSV statements?
Yes. The CSV importer parses the file, lets you map columns, detects duplicates against existing transactions, and keeps an import history with undo. Manual and connected accounts can coexist.
Which bank providers does Graspee support?
Plaid for major North American institutions, and Flinks where the operator has enabled it. Provider availability depends on configuration. Imports may be unavailable, paused, or rate-limited at any time.
Does Graspee store my bank credentials?
Provider credentials (such as Plaid access tokens or Flinks login IDs) are stored only in your encrypted local shard. The server is a pass-through for provider API calls and may hold sync payloads briefly in memory for recovery, but never durably stores credentials or transaction data. Our server stores non-reversible HMAC fingerprints of provider connection IDs to enforce per-user link allowance.
Can I connect Graspee to my calendar app?
Yes. You can connect a calendar app to a synced profile: Quick Add events from your calendar app land in a Graspee Calendar inbox for review, and a read-only subscription echoes that inbox back to your calendar app. Both flows go one way. Calendar app connections require a synced profile because Graspee hosts the calendar endpoints for your devices.
What is the Calendar inbox and why do imported events need review?
The Calendar inbox is where Quick Add events from your calendar app land before they enter your Graspee data. A Needs review badge marks new events; you can mark them reviewed, ignore them, or resolve conflicts. Review keeps you in control of what enters your encrypted profile. Reminders for these events fire on the calendar app device that holds them; Graspee does not deliver its own reminders for events imported from a calendar app.
Who can read a calendar subscription URL?
Anyone with the URL can. Subscription URLs are bearer-token URLs designed to be readable by any calendar app you paste them into. If a URL is exposed too widely, rotate it from Settings; rotation invalidates every existing subscriber. Treat subscription URLs and CalDAV passwords like the data they unlock.
What happens if I lose my device?
If you had cloud sync enabled, you can restore your data on a new device by signing in and entering your profile password. If you used only local storage, the data exists only on your device with no server backup.
What languages are supported?
English, French, and Korean. You can switch languages anytime from the interface.
Can I install Graspee as an app?
Yes. Graspee is a Progressive Web App. On most browsers, you can install it to your home screen or desktop directly from the browser. No app store required.